Infrastructure as Code

Lessons from the field. Always landing on my feet.

All Cloud Security Microsoft Sentinel Identity Security AI Security Detection Engineering Threat Detection Microsoft Defender Container Security DevSecOps Infrastructure as Code Zero Trust Agentic AI Entra ID Microsoft Entra 3 posts
Jerrad Dahlager
Jerrad Dahlager, CISSP, CCSP Cloud Security Architect · Adjunct Instructor
About me →
NEW Detection Engineering

GigaWiper Detection as Code: Testing the Sentinel Repositories Preview

Featured image for GigaWiper Detection as Code: Testing the Sentinel Repositories Preview

Microsoft published its technical analysis of GigaWiper on July 9, 2026. Microsoft describes it as a modular backdoor with destructive capabilities, including scheduled-task persistence, RabbitMQ-over-AMQP command C2, Redis status and output …

27 min read Read more →
AI Security

Building an LLM Prompt Injection Firewall with AWS Lambda

Featured image for Building an LLM Prompt Injection Firewall with AWS Lambda

AWS continues to enhance its generative AI security capabilities, with improved prompt attack filtering now available in Amazon Bedrock Guardrails. Despite these advances, a significant gap remains: organizations are deploying LLM capabilities faster …

11 min read Read more →
Infrastructure as Code

Terraform 1.11 Write-Only Arguments: Keep Supported Secrets Out of State

Featured image for Terraform 1.11 Write-Only Arguments: Keep Supported Secrets Out of State

If you’ve worked with Terraform and secrets, you’ve probably wondered: “Wait, is my password actually in that state file?” The answer has historically been: yes. The sensitive = true flag does a great job hiding values from CLI output, but the state …

8 min read Read more →